trend micro interscan messaging security suite vulnerabilities and exploits

(subscribe to this query)

5.1

CVSSv2

Trend Micro ServerProtect 5.58, and possibly InterScan Messaging Security Suite and InterScan Web Security Suite, have a default configuration setting of "Do not scan compressed files when Extracted file count exceeds 500 files," which may be too low in certain circumst...

Trend Micro Interscan Web Security Suite Trend Micro Serverprotect 5.58 Trend Micro Interscan Messaging Security Suite

7.5

CVSSv2

Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI prior to 7.510, as used in multiple Trend Micro products, allows remote malicious users to execute arbitrary code via a crafted ARJ file with long header file names that modify pointers within a structure.

9.3

CVSSv2

Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote malicious users to execute arbitrary code via a malformed UPX compressed executable.

Trend Micro Control Manager Gold Trend Micro Interscan Emanager 3.51 J Trend Micro Interscan Emanager 3.6 Trend Micro Interscan Messaging Security Suite Gold Trend Micro Interscan Viruswall 3.6 Trend Micro Interscan Viruswall 3.6.0 Build 1182 Trend Micro Interscan Viruswall 3.6.0 Build1166 Trend Micro Interscan Viruswall 3.8.0 Build1130 Trend Micro Interscan Viruswall 3.81 Trend Micro Interscan Viruswall For Windows Nt 3.4 Trend Micro Interscan Viruswall For Windows Nt 3.5 Trend Micro Interscan Web Security Suite Trend Micro Interscan Web Security Suite Gold Trend Micro Officescan 3.0 Trend Micro Officescan 4.5.0 Trend Micro Officescan Corporate 3.13 Trend Micro Officescan Corporate 3.5 Trend Micro Control Manager 2.5.0 Trend Micro Control Manager 3.5 Trend Micro Interscan Emanager 3.5 Trend Micro Interscan Emanager 3.51 Trend Micro Interscan Messaging Security Suite 5.5 Build 1183

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1394 allow remote malicious users to inject arbitrary web script or HTML via (1) the wrsApprovedURL parameter to addRuleAttrWrsApproveUrl.imss or (2) the src para...

Trendmicro Interscan Messaging Security Suite 7.1

1 EDB exploit

6.8

CVSSv2

Cross-site request forgery (CSRF) vulnerability in saveAccountSubTab.imss in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1394 allows remote malicious users to hijack the authentication of administrators for requests that create admin accounts via a saveAuth act...

Trendmicro Interscan Messaging Security Suite 7.1

1 EDB exploit

7.2

CVSSv2

ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite (IMSS) 5.5 build 1183 and possibly other versions prior to 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe.

Trendmicro Interscan Messaging Security Suite 5.5

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook